CVE-2026-81934: Redis TLS pending-data list use-after-free
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Redisto a version that resolves this vulnerability.Fixed in 8.2.9 - Upgrade
Upgrade
Redisto a version that resolves this vulnerability.Fixed in 8.4.6 - Upgrade
Upgrade
Redisto a version that resolves this vulnerability.Fixed in 8.6.6 - Upgrade
Upgrade
Redisto a version that resolves this vulnerability.Fixed in 8.8.2 - Upgrade
Upgrade
Redisto a version that resolves this vulnerability.Fixed in 8.10.1
Event History
Frequently Asked Questions
Which Redis deployments are exposed to this issue?
Deployments configured with TLS support are affected. The vulnerable code handles Redis's TLS pending-data list.
Does exploitation require Redis authentication or user interaction?
No. The issue is remotely exploitable by an unauthenticated attacker and requires no user interaction.
What could an attacker achieve?
An attacker may be able to execute arbitrary commands with the privileges of the Redis server, affecting confidentiality, integrity, and availability.
Which Redis releases contain fixes?
Fixed releases are Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.